nerdexam
Amazon

SOA-C02 · Question #422

A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its…

The correct answer is D. Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the. https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#auditing_key_use

Submitted by olafpl· Mar 30, 2026Security and Compliance

Question

A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its own encryption keys. However, the company wants to maintain an audit trail that shows when an encryption key was used and who used the key. Which solution will meet these requirements?

Options

  • AUse client-side encryption with client-provided keys. Upload the encrypted user data to Amazon
  • BUse server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the user data
  • CUse server-side encryption with customer-provided encryption keys (SSE-C) to encrypt the user
  • DUse server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    12% (3)
  • D
    81% (21)

Explanation

https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#auditing_key_use

Topics

#SSE-KMS#S3 encryption#KMS audit trail#key management

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice